feat(tyr): add wireguard.

modules/linux/nixos/secrets.nix

@@ -19,6 +19,9 @@ in {
         wg-home = {
           file = ../../../secrets/wg-home.age;
         };
+        wg-ymir-home = {
+          file = ../../../secrets/wg-ymir-home.age;
+        };
         crony-passwd = {
           file = ../../../secrets/crony-passwd-desktop.age;
         };

modules/linux/nixos/wireguard.nix

@@ -15,7 +15,8 @@
     };
     networking.wg-quick.interfaces.wg1 = {
       autostart = false;
-      configFile = "${config.age.secrets.wg-home.path}";
+      # configFile = "${config.age.secrets.wg-home.path}";
+      configFile = "${config.age.secrets.wg-ymir-home.path}";
     };
   };
 }

modules/servers/tyr/default.nix

@@ -3,5 +3,7 @@
     ./syncthing.nix
     ./glance.nix
     ./wallos.nix
+    ./wireguard.nix
+    ./secrets.nix
   ];
 }

modules/servers/tyr/secrets.nix

@@ -0,0 +1,9 @@
+{
+  age = {
+    secrets = {
+      wg-tyr = {
+        file = ../../../secrets/wg-tyr.age;
+      };
+    };
+  };
+}

modules/servers/tyr/wireguard.nix

@@ -0,0 +1,17 @@
+{config, ...}: {
+  networking = {
+    nat = {
+      enable = true;
+      enableIPv6 = true;
+      externalInterface = "enp1s0";
+      internalInterfaces = ["wg0"];
+    };
+    firewall = {
+      allowedTCPPorts = [53];
+      allowedUDPPorts = [53 51820];
+    };
+    wg-quick.interfaces.wg0.configFile = "${config.age.secrets.wg-tyr.path}";
+  };
+
+  boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
+}

secrets/miniflux.age

@@ -1,23 +1,23 @@
 age-encryption.org/v1
--> ssh-ed25519 2P4nKw shDeMbFvSZFP+h6Y0O6o03x2kJNnyptfp2YIuMVJ2xs
+-> ssh-ed25519 2P4nKw zUFKspl9ykaR/E3m3O/NXtdamcwVZqxwhaiCHWmkG2w
-wPbvoKQhDsWrJ2i1Cff4mdQsqPn7G0/OOQgA8erdyQs
+Nmtpqh0a2610G8ZaoE1BLHCXi/5n8IcMqGIkGjqjZEw
--> ssh-ed25519 6+hQpQ J1HgJYMw8qJhbh35xUFf3mPTydaM9D26MBA6dV0YsE4
+-> ssh-ed25519 6+hQpQ 8n2FPk9aFyoPWqXxtmMMZ3jOxRg5jV8U8z7k2mAcz3M
-AL2zDiSqHEjR8kif0B2nKmjC1oKctvTolG7uTWx8M1U
+wmAsjssArEZI/3ZHRywo5YF+J6+6/CuECDWbHrJtMvo
--> ssh-ed25519 l/ODWA s/5Ry9Rf3gigLv3/frFTk0NZsM5rZeOC99dSPNRawyQ
+-> ssh-ed25519 l/ODWA 4SqIYIXLuB6Isav5JVrCT7BoAeSNvdXbmL1CY04y0xk
-SxMQM3vew3j+430nxPXyDBXVSfkfotkQKXZW7GgYs1Y
+SvtDIMyksW+Oe8L0y7otE+QWXBnffhsf0O2zTUlwGTk
--> ssh-ed25519 7+5K3Q uKTKmWV82vydfuT68Y5KPWm/1ZO4K5LRbP5IqOJwwn8
+-> ssh-ed25519 7+5K3Q XBJLW33CvvXUMYJJ2HiWDApoer8ogpCoZ05twxZMi34
-0zACsj614oj0/K9tklvxwDvKRGm3/I1t0ui6DYyPDaQ
+Ftdvr0kKQFaaAtWhokL20phMPvJHTagxs3trqskAetw
--> ssh-ed25519 Ow0TGw bUPmGt4PI2+wfOZ7cFYU/oAAEhqjIp0/EdTtYVkYuRM
+-> ssh-ed25519 Ow0TGw qtqzlIXRa6Oz+N2TjPfuftgN1ki/Vo2gx/MoVnAXu1E
-aZdahEa2wX59grVjGFe6gn/NAkEtU8Y/yimZHEYiBbc
+1hNrP+okPjk1Ay/ilUPrh3/Wt1353aIiV/aykFEJHeE
--> ssh-ed25519 cEINMA 5gI0TEgn2Zzp8grqy7a3IZizR3o9qeD9ZcLHetLHPSo
+-> ssh-ed25519 cEINMA 2LbQI/m9LkJHcGlLvmIgh+lKJeiQEn3xb5x/Ku2DwwY
-lv4+zV1KIRqS2xyXDnRYEMSMezdCx9B+LqDIDjVkArE
+8XJY0vIIFqHLkE3gAKf8Uf03Tl9L9xA25p+OS+EH9Kc
--> ssh-ed25519 qbMKrQ u4VgaSl0W5m0tDeUXn3HnGm2+LFty1wRP7bEVbTg2F0
+-> ssh-ed25519 qbMKrQ ssE3YV4Rr/46jz/M0XxJMd7QmSTjwdacB7w029jz/x4
-1aAGQW33C/o0frsWmhZccb7VANgC9pauW+2cflb7fjU
+3w6ORNzDMtJyd0k0W7i8qbxeSmgtCFt2RiYx4xWlQik
--> ssh-ed25519 Z0mAzw nZ4lQQWGF/DzqvB/Od74nySjxQLQn0yC4BfRSAnXyhY
+-> ssh-ed25519 Z0mAzw 11TQ03HbTvz0ad2MvptMU9QU6JsOraUVHTvL+xq1rWA
-1P8KxJX6vnXvxcGx8bkNi3Mh8vg6cqj9iH6RGhgA/EY
+MBh58U2QOmjngk9yZf8OPJMN2HxJRZwFmwlDgamwAUk
--> ssh-ed25519 GNZYRg AkrB1RA1xGnRDb1sgC8YLlNBdxuzedRT3edVA5/ceCI
+-> ssh-ed25519 GNZYRg 8ZDhrbp107pEacI9NsZBY3CLvTOV1Ws3GLxOwtLnah4
-QuFhi0tJVuJovEzeOdEQrQuIk895ApuvYaZUgrAqyMQ
+vnoKn5B1s2t1ALC+jNtTmoS2quS4t96u6M8/EkefA/Y
--> ssh-ed25519 fd/ZLQ EOgeRt+YofTY2jdhSgU/32MXBXdqONPqhgYm+cYTiBQ
+-> ssh-ed25519 fd/ZLQ Brg72c+4QJ9esnV8TMrS4RXJYvwlMGNoZaoNvYF0EgA
-ahTyFWoGLOAoaZHYo78dRaEhSv8x7N5cx9oL8PaD/04
+JrkunHolxGkh+pDddqLtJM5FsLGH5C1mDapBXLW5sek
---- xJUTGS9QYDvmdsJZkV6TsFPLnJeVfZv44U5Qlz2Ui4k
+--- elAicibsoCzPh/JpEWKI3c+mNt7E6BjAtp0o9HY6k2E
- <EFBFBD>€¶Áfj<EFBFBD><rb_È€N|ž\T¦f™w‡7œ Á·Ÿ*X£©ãmæÐܶ›9C3+Ó¨P
,%¸èîÈ®<C388>Ï‚ƒSDöJ„ñÅsdmîH@¿m5¸_{è¸Ò×àŸ5Ê°qo<71>‘'ÚWè³Z›þyÐ$AGŒ.‘]QàÏ!!éȯ§Äù}ž7Ç€
+í@(0Pnõ4‚”Q2	0äʧæÀ~1¤-¬’ª Ì´ ‚†UwΫ)¿õç,À³á'ú èš—¨®ŒÝ¹÷Rsj¢}‘(ˆ¸7aÅù&*æ1νyëqý/˜hAQµ	<Á’Y“!Ø<>~~:’ŠÖv’ßÉ6R0ÉÚ uèSL|ˆÚéxMD<=†à

secrets/restic-backblaze-env.age

@@ -1,23 +1,23 @@
 age-encryption.org/v1
--> ssh-ed25519 2P4nKw So92p303DZShrOmZCAlkG2B8vZdrem70LDvSDIjBz2o
+-> ssh-ed25519 2P4nKw YX9yjyYshPSotayUzkuw1Nm2gFAmmeZ25SbqW96JOnM
-ze8Xp5qCQnv2BhWxinLEg6ZFNAyZ1k44eYli1d5KxSk
+SJz3OCM5VzeQvzDVGjLOHOBxPSVlumGlq6bEOXhu4Lg
--> ssh-ed25519 6+hQpQ /BnPKWxZ+GyMJwzwHnZ/2cXJsXp/2bExN9y4XYUpZwY
+-> ssh-ed25519 6+hQpQ 3WyXmhgZXNK7QM6qzMXZ+wpg6FBEtMcM7lPYVNcRnlQ
-5xehgtXcCJEH71HbNeNLnTOn/r3RsIyayDDIVO+s+64
+bJotWKVQ1/KUyeh0bE3ipyV8lET4I6ET4Fvt69/0IUM
--> ssh-ed25519 l/ODWA 5mE6qiAzTz84RDMxOMbJGXy1pYPIkbfqhIglMjdaWm8
+-> ssh-ed25519 l/ODWA sLPChfhPuhjZRO9x0/FAARQaBSsa6ETQGPcZdVfDVDg
-0+KMsS/6WGVxiOOy8/D1z2QV0pHEImskUojLe/pmDkU
+/IZhnZGDW0Ad+YU7sx+W+HTxe1aQxJo1ek/3gmBkfTg
--> ssh-ed25519 7+5K3Q 736r4P5Rcp4SqOvbDa3T+Dx/2bra3oT1/y/z9uWgThM
+-> ssh-ed25519 7+5K3Q uA1KVP8hbrT7z/MGRLvcpiJb/svm1hir1vVUi8YUKCg
-bVy+lsFNAua9oJz7vHhgy8zzYw/W/I3A+pOxpgZIhXw
+jFFKA99uuoeVYnoZIASb+WVM9OYNrUp9iKEQCto6+r0
--> ssh-ed25519 Ow0TGw F/vxImZN9hJM4+mhPKpCl6SciXiaXhb5cSnlP0ez7z4
+-> ssh-ed25519 Ow0TGw vfOgQKJEQBokhE9pjkxcIAldP58t6KUEhh4yh0FDJ2c
-YmlE6ckdWNa5S1H/QpTuMbCq6qwW3rQ34ThU/NJf4wk
+QTweI2P4f67ieRCNNylD/lsWuyh9mnWk2rR6MHU2am4
--> ssh-ed25519 cEINMA /nwkvl/nHTz3VLfLUfLenKL235RtkhQ1ESlxcDX43WE
+-> ssh-ed25519 cEINMA ADPVzSX86S88pPc7xL+xIQ0Lv2x2JFwrX6ByTCczDEI
-6BxUxSzOvA8Q6x9Towiq/W110zdFZe649B9JBpAq8f0
+hipDPel159suxp4jceUFlBdCsUywt2uGBKnQ8hxqKrM
--> ssh-ed25519 qbMKrQ nGD6w97YqpJq7c0JogcjO0qRFqSP22rx3HwxAq5Crnc
+-> ssh-ed25519 qbMKrQ XJhZ9PPiyc6Wnst68ilyijruYlmdtOJuZFkwzH1j+Ro
-l0mMSnl1eW1K27EP0SMO02kpThoguDq3VTSa7QjsAJs
+of5QAkzUDvZh7WJbltuKPcoXm0uCA+qtTuvq5tSRteM
--> ssh-ed25519 Z0mAzw 1cewie5x5hxcuXCdREyn5Caws3hSiLqm5MNXccf2wTg
+-> ssh-ed25519 Z0mAzw lnICwhFjZJ64l/WJfld6nO9miNxO6GXsVApM3gLwNyw
-7RYkfWWQzmtgcHKHtnZI581Ae9ZJp2dPpvpaGqJNLM0
+9S5J0VeRWIy90/vg/rTZJTaMLpL13v6vY1UuZZ/uzRM
--> ssh-ed25519 GNZYRg 3VR62i/ocuHgOXm2hVwWpw3dC1WwXUITdOex2rumkAM
+-> ssh-ed25519 GNZYRg 5kfm3rerAH3pbh+qZ7JCItK/APxmVy6roS7k8SLsIjM
-zoakTGxOXiCJMaZ8sL2JchiI+Z7e0wBMxACMX3IHsag
+7hrF6lHKL7Y8YXmHUgkuXz+zKybS+/p0wyltzRtH9lc
--> ssh-ed25519 fd/ZLQ d5SOqqBFaQA1NcffQ6GIc6N9ZqtqS8YoDBmcf0aeixI
+-> ssh-ed25519 fd/ZLQ 1owNAs4nhNjAKFkJnAbw9icw+1OQh4sy+QO9SW5nWDI
-myC17QIcIEoDtJHIRaNRLdch09uD2occ50j5cBvRE9o
+faVdFrj2cf9aNUdPkM3w/9zZ/JQcgLkhqlLp/mg7c0U
---- bY/3rsqR9Nw/6HKXcDG9GSGxUxI/pPULLbGlZqiAhx0
+--- NKiHTehU8EmBmwPtC6pEqfgVxANbJDZHNoZG+MLViuQ
-sß•h˛önUwśx'}Ž¦Wő¨ńËrFľöβ°y/BN˝©gĐLgîÔ¨#`4ĽěăśqXŹ@ĄCI(LťÚŽ0‰QËýu–Ý—Oú׊dßáWéC@˘^ëĐ`…1ba$uł™ěbzť›"{&ďóŮÓ…"vDŚSÁ8hf;zG´Ŕ´ř
+<Ó;TrSZÎõ/÷ˆ
™ÿ&·ìé§`íw™Û5i ÷0>‚õrÏNÄT¡»!
ÁÃ<C381>OÉn28z9ØÇ^˜V=á0.€Ë<E282AC>¯Ç° Rµßþ]GtÕð¿zNHÜÊóÓŠKA¶:^4"ä2ö†wyvvõË7
0

secrets/restic-server-env.age

@@ -1,23 +1,23 @@
 age-encryption.org/v1
--> ssh-ed25519 2P4nKw ckXuRfcgoacl1EZdkLiOVB+vbH6300Lu3pgJwXnIjn8
+-> ssh-ed25519 2P4nKw 2XPsLEgnxmK2oaAT4yX8b4+a4jHQP7FIJzHOLEMuIVg
-Gjovdd5AUL8bsj5ylZJtxM+a7rflKgFfpxNvVkVEK6I
+7GMhJh/OufmSoEfC845xP53vJDgzEa/SfxOqO67Pegc
--> ssh-ed25519 6+hQpQ X0/psD4CoAfEPbVYD9mi3foODhw883tI7RrcMdFr3BM
+-> ssh-ed25519 6+hQpQ 8l7CIxM7faE9egtBkR/XD/GL8obp+nF602Nq7VhJr1g
-fLAmEO7cs+wLIDHdjp2p7DJkVfJ1On8w2DAIRV8f7Fk
+gm+ZpUdbixtreng7NZTtWEp+62td6WvgeJNZc/D91OI
--> ssh-ed25519 l/ODWA b5WxXdnweWeuWF5BpfsrGUxRgKMuaSx0ZodP7TTsUSM
+-> ssh-ed25519 l/ODWA Mz2Gd3V2EUVIpAM1OuDCgg4Vw4KHieCpgdwWQ2JnQA4
-sLNYLFbMeFc4kGqX3tN75LwUrSdRLSCyUWfIWS/f65g
+YTzUwXRq9ADTfAUFrMzPNe6TZzZgn57KidAbLbw8BfU
--> ssh-ed25519 7+5K3Q XdnsRIy/UszMX1IAl+5T1LWnBmIp2cwTR90Re1tcikw
+-> ssh-ed25519 7+5K3Q 5Y5z6j6vq3Iyrm5czlmWxBS8aAtlApVN+7c2M9ayEic
-UpckYo3EoOHCnXDqmzkZxOzmhjWaAcn3F9LX335/UMI
+f6E2BR9izgT0z1MA4fUko0T9bj/1l0AkVor06tXNeIM
--> ssh-ed25519 Ow0TGw KV935iFtx5XjS/H6BdWDf7jfMZoPVYx2c4KSHeI8iSE
+-> ssh-ed25519 Ow0TGw c1hVNmctFJhtGjoNSg6yuN4MZ/I5vTpP8c3xE5rE33w
-EXCCV2U1OSkHDSIxodw2Hp54Bof40OLa3uxEukIBzvM
+37QF7xl6444FtX4Zqjplqshs3tQVxn1koLhfnaXXodo
--> ssh-ed25519 cEINMA w3QIQtd2lQ9a1BkNtwYKieomprP/oiX6tqOTZezfbE4
+-> ssh-ed25519 cEINMA 76B3avgDJCVgEi/dC7/bTUgTz4cUwARu4Xk6xeXkICg
-dCWSEvIl6GiIccCfx7ul0u5XurMksF0mTGDNbvBjOIA
+mDXtZrDeO0zSpE4myiu05TprAE62jz7Y1qVDHpfW0ps
--> ssh-ed25519 qbMKrQ BJQCynZM4Kv0b3gW7TDZIs8XmC2uQDBeZqt0yFSp/Qw
+-> ssh-ed25519 qbMKrQ mDsW5QElt9gN9jePV6UUlSTNMF4KzpSYJv0HGawP80k
-uTfKMGUkk/FiF2J1j0C1piVsqh7moa0Rs2/Z8l4X/SU
+AmWoCadxAJBOduyfozpqiHLFUHzJm+zxlfpaYInOND8
--> ssh-ed25519 Z0mAzw Pp0mLtfGYMODQX6unnWNCy+zSR1t35aoRP3wCuyZSU8
+-> ssh-ed25519 Z0mAzw ioZ3LlESeTxLbjm61LIkInPSOG/+viO1Ow+BQ9OtFFo
-K/ebkF1z9Yo1/Myaw27n/arYay2BpiIoRXOC5oCqm0s
+7E3m1iOu+Ou/DPWqcJA8ExXBaHBtMbpUShON5F45deg
--> ssh-ed25519 GNZYRg r5/opjLZDD/LS+pKpI9lQrR/QlJars/vXIJcbajlw04
+-> ssh-ed25519 GNZYRg a3SWSbggDtCNp25uWrovE5NKHShDxAH1mkyU9zjOczQ
-CRhU6joP6xBvjIdc8fNwTviYZtnsYrH5mQyLSZlAEmc
+a+pk5nxgDGiYPiza6mFR8H3Wsq9vvI0ee6c/nlD4je8
--> ssh-ed25519 fd/ZLQ kkOhy8+3s/oigyNu86n0qwY2r2Ic/gwl0xPcZlTx7E0
+-> ssh-ed25519 fd/ZLQ pa8cET/t8NDY3oOMm67RLFFHzemKdoNSfwHu8dxWFxE
-gUNxAJDJLHVxYZRzobzWyP5JDKAjw+cu1PZAeSk+YpA
+6LpiJWFQUDQVG4kdjnQdwE9DtXnU13szA7hv4v/pGKI
---- B3d3FDUOTqYEX8Kn8fO00I3Ktybd2dSgtfdLkiCT8Wc
+--- Ld6Eiqy5j9pHU2JaH27aNd5mHr6KL+9ClHvK+vpfhXY
-Àæ%<25>1,É?å°Ã–ƒÑ’ÂÀ(w«ºlhëßj¶Ïª<C38F>mO(‰`òÅžˆ•XëF<C3AB>óI&õR£›j<¹S¥Â¡DÀnmkJòæé(É,‹ãÚîùÝÈzÆåf÷q÷<71>
%;s^<5E>n<EFBFBD>07ˆü^ž0.5:•k9<6B>Å®~
+=Ó-Œk¥ùçO¬_Qïäüž?Õûý÷ž${u{V.ÿûn<Kx­ûJùÝwžp² ÜœÒÂÏ°`ŸBGoGïºÍaÝ_o²V0BQ3|òáœÕëÈ;Ö&<26>ZíÙ©Ùb–ÈRîLMJîŒ
&úo›<>y<>š¼¿d#ã^°&

secrets/searx.age

@@ -1,23 +1,24 @@
 age-encryption.org/v1
--> ssh-ed25519 2P4nKw 3oYpvKLlhQ5wAwQ0xhRfM6U1U3JbQHTGHTxsl2NDhiA
+-> ssh-ed25519 2P4nKw nwfLosH1CKNdBnGw5dtjTuLnsybLop7xbPhN1ExFhiI
-eMbFmYBo+eIP8Qx9NTjY0OvE1gnM0VjVWj0jAK+OsfE
+v4x0cSjZ/YfM06/ADse5phjDaAiogixxzjydx8X3wOk
--> ssh-ed25519 6+hQpQ CXThwy40SidKc02/OaTAfBIDGCXKMW76nD1of6K9PBc
+-> ssh-ed25519 6+hQpQ WSt8y6r1GdfI9ui1MoZyHmWmW1hOTuNLJDeP4y5AURs
-ZSYd+PSkJ5XR5NQNwLHfvMGWVmnHEzw9THEdc76lc1g
+XnNCM+m/aQh4vCKSdhJ7vf14P4PmYOHjPMj4Bhiq0WE
--> ssh-ed25519 l/ODWA 9VsSkkbx2TCPJw7K4WboY7LZqRU1k1sOQhloLD0FSEU
+-> ssh-ed25519 l/ODWA Nit7dupWGEvCFTDcRlZ1v2fjHCf3hO2MRZrESP9CQkE
-ZHHH9iK10NGp2Xe1N8P6XZboYeUT1Fouv8+FVwVLosM
+z393UDcVoIdAzJMseXoK2VG0caDwfBcUzTHj0RO2EHo
--> ssh-ed25519 7+5K3Q Iqz0Nbx9bJbEeAhuBpNMvYt7doCNts12PmJAW4EXGDA
+-> ssh-ed25519 7+5K3Q 52fxaIbE8BrfVPWPCqtcWvwOILs7Yzh33QBEaNgvNSg
-fgDrFWZmoUqpExlLyxGXx2rZOrf/AOH68BeI3AP1kpY
+HN9qvK6c+e+ExnZ6hyDZfLbUD84CoLpeGyAALyIqkdw
--> ssh-ed25519 Ow0TGw LfSX5IJF2b6+YbeD8FM+JrcQT9KFVK2eAfX98apjFS0
+-> ssh-ed25519 Ow0TGw 64EdQb9LdlPfl37/HjaZsXZbZKznA5//j04ZugKNGEo
-zIbaVTQals792lfagFHtc1NG26vS0600KSrlGjwB0DM
+BABDz+FktZ+LjQVYVD0URKgH0aJCqPFVc6zNXV6DLQY
--> ssh-ed25519 cEINMA QN1iDI2yP1/jORS2IGw+mNC0fp77yZkiQY9FBSPKzXw
+-> ssh-ed25519 cEINMA 5YRYIrrs+BxHidgTUORuM9Efmx8EjwBEVVMHZagAJhI
-XbGnx1AJbAa4Co/w3aS10NIj9KcA+4moOIq7UeM+NdI
++X49s1auESnzszkY3hzEKGqQl+7cDq9xZ1Du2LkwLjA
--> ssh-ed25519 qbMKrQ deaiUztxDw6X+f4X1NeL/fLZnAz+Ws6xFY6dIV7BdEk
+-> ssh-ed25519 qbMKrQ yB1/bzP4vgdxxKNG6tTniNxXy4q3mAfUInr4PU0jV0g
-N4GhZKkKFloTTc1m25tnYAJAZoTpm6V5Kjit+DVD5nY
+37c7KvBD+BF9UIkLAmAgU0V42RdwL1zN5TSKYLM4xKs
--> ssh-ed25519 Z0mAzw mRkMNdkkc4JMVTw51R83fz4pTdjfUCme13JuYse/hRw
+-> ssh-ed25519 Z0mAzw 2HSLb/GoErfkh6UeUB9iGsLfhbTZtx+708puOLnOkEY
-8vA/uHh5ySh4wET1JB898s3xoQlXRsvTj8wPlPJtfQQ
+esCwGKEnuZ+6hcXPqLauUnpzKK77OXg/RhxzSRN8+h0
--> ssh-ed25519 GNZYRg Yq9f+hqG9jF6EaqqIJviS76ikav34k3R0q5hVo2d6Ug
+-> ssh-ed25519 GNZYRg Xr+wya4uW42VYQBnnMlEnTZWyPe9qTN71Q30wbArOCs
-DXY5VPNwHgfqrm/fLBRCcY3KAUJUgUzUBYkgg6CdAWM
+7IkWHiVZXnN3QrlAYx62c8S6equVCHWgnsphNIxur88
--> ssh-ed25519 fd/ZLQ IUYIFXP4cxovg6JN14MekjPhqFn6q1jvX7eUcgcysAc
+-> ssh-ed25519 fd/ZLQ MoFGLpKnrFAUvci0v14WXrvF4QzISTqh1IpNIieckAQ
-7aQFolSbKQMFaHsn+53hoETYazDtTM5z6UT+AgHg30s
+/Bc/b6VC2zcKUsFWtYaeRZjvM3OGGBktR1R7vmmrdGM
---- 1v1W3YFI2W+cQekLb3Uoz8IV10Kr5ua7MizUy8HGgCA
+--- F/HrSVzELHHnQXkm0sLtcJCK+8SEbtqhAVJaoZIKZ9g
-*¹åx›*R–îï<C3AE>çí£Ðy48Õˆ;'œ¥J:”O…ȇŽøz§Óóí±¬ß˜È~*˜Ïbíöò&«,8¨ñ’¤7¥ŠÂÙt
+o‹mr€®¤bJ‰V¥VjÊÉ7ÙN4+ÒS
+âk«<6B>)ýîÐ%Ôù`É<>À£š}>Ìö]@W†eC½¤ÿmªk˜ÍúJŒ+šì<C5A1>ã
fùí\q νU

secrets/secrets.nix

@@ -39,4 +39,6 @@ in {
   "restic-server-repo.age".publicKeys = systems ++ users;
   "restic-server-env.age".publicKeys = systems ++ users;
   "lemmy.env.age".publicKeys = systems ++ users;
+  "wg-ymir-home.age".publicKeys = systems ++ users;
+  "wg-tyr.age".publicKeys = systems ++ users;
 }